Draft, version 0.3, 3 November 2026. This document is being prepared for privacy and legal review and will change before we accept bills from the public.
Who we are
Handle My Bills is a service of Axiom Labs Limited, a company registered in England and Wales with company number 13225000, whose registered office is at 128 City Road, London, United Kingdom, EC1V 2NX. Axiom Labs Limited is the controller of the personal information described in this notice. The service runs at handlemybills.co.uk.
For any question about your information, or to exercise one of the rights below, email hello@handlemybills.co.uk. Our registration status with the Information Commissioner's Office is [to be confirmed].
What we collect and why
We collect only what the service needs to review your broadband bill and act on your instructions.
- An email address and a postcode, to start a request and check which offers are available at your address.
- Your bill or contract details, including a copy of the bill if you upload one, and the facts we extract from them, which you confirm before we rely on them.
- Your instructions and constraints: what you will and will not accept, and what we may do on your behalf.
- Whether the account holder gets a qualifying benefit, if you tell us, so we can check for a social tariff. We use the answer only for that, and we never pass it to a provider as a record of the benefit.
- A name, an email address and an optional picture for your account, so you can sign in and see your case.
- A mobile phone number, only if you choose to receive a text when there is something you need to do. We use it to send those texts and for nothing else.
- Records of what we recommended, what you decided and when, and the terms you approved.
- The emails and texts we send you, and the support emails you send us.
- Sign-in security data, such as the time and method of each sign-in and any second factor you set up.
The lawful bases we rely on
We process your information to perform the service you asked for: reviewing your bill, researching your options, recommending a course of action and, with your approval, dealing with your provider.
We also rely on our legitimate interest in keeping the service secure and in keeping an accurate record of what was agreed, so that a decision you made can be shown later.
We do not use your information for marketing, and nothing in this test is processed on the basis of consent. If you choose to receive action texts, that is your choice of channel for messages the service sends anyway, and you can change that choice at any time in Settings or by telling us.
Who sees your information
- You, through your account on handlemybills.co.uk.
- A member of staff may open your account view only to handle your case. Each opening is recorded with who, when and why, and that session can only look, never act.
- Your broadband provider, or a provider you ask us to approach, receives only the details needed to act on an instruction you gave.
We never ask for, and never store, your provider password, security answers or one-time codes. We never ask for card or bank details by email or text, and never store them: a payment, when you choose to make one, happens on Stripe's page.
Our processors
These companies process your information on our behalf, under contract, to run the service.
- Hosting of the website: Vercel.
- Database, authentication and file storage: Supabase, in the region [to be confirmed].
- Protection against automated abuse: Cloudflare Turnstile.
- Email delivery: [provider to be confirmed].
- Text message delivery: Twilio.
- Payments: Stripe. You enter your card on Stripe's page; the card details never reach us.
- A document-reading service that helps extract the facts from a bill, which you then confirm: [provider to be confirmed].
Where a processor holds information outside the United Kingdom, the safeguards for that transfer are [to be confirmed].
How long we keep it
- Your bill and any document you uploaded are deleted when you delete your account.
- Records of recommendations, decisions and agreed terms, and the instructions and constraints you gave us, the qualifying-benefit answer included, are kept without your identifying details, for a period our retention schedule will set [under review].
- When you delete your account we keep a hashed record of its email address, so that we never message that address again. It is kept for a period the same schedule will set.
- Security logs and backups have their own periods, which the schedule will set.
Your rights
You have the right to ask for a copy of your information, to have it corrected, to have it deleted, to object to how we use it, and to receive it in a portable form. To exercise any of them, email hello@handlemybills.co.uk; we may need to confirm it is you before we act. You can also complain to the Information Commissioner's Office at ico.org.uk.
Children
The service is for adults who hold a residential broadband account, or who may act for the account holder. It is not intended for children.
Changes to this notice
This is a draft and will change before the service accepts bills from the public. When it does, the version and date at the top will change with it.